Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/82/0ccab6-d837-4c18-82f9-940ae454cb85/1/kIFN053Tklz_iL801DB_1sYhZes.mft
File: kIFN053Tklz_iL801DB_1sYhZes.mft (raw, json)
Hash identifier: 4c9UknAA2PW/vzXxRYPyUT0Ye+LVPItvXk+U3Od5ljs=
Subject key identifier: 64:60:A0:47:38:65:13:0B:D5:A0:FC:42:7A:62:98:57:CA:E7:4A:BE
Authority key identifier: 90:81:4D:D3:9D:D3:92:5C:FF:88:BF:34:D4:30:7F:D6:C6:21:65:EB
Certificate issuer: /CN=90814dd39dd3925cff88bf34d4307fd6c62165eb
Certificate serial: 019D2BF3378FA9408059C181625944A435F5
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/kIFN053Tklz_iL801DB_1sYhZes.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/82/0ccab6-d837-4c18-82f9-940ae454cb85/1/kIFN053Tklz_iL801DB_1sYhZes.mft
Manifest number: 0ABB
Signing time: Thu 26 Mar 2026 21:00:52 +0000
Manifest this update: Thu 26 Mar 2026 21:00:52 +0000
Manifest next update: Fri 27 Mar 2026 21:00:52 +0000
Files and hashes: 1: kIFN053Tklz_iL801DB_1sYhZes.crl (hash: IQjXs3yiWgecnpH4CLoSyeLVbRJ6EwgUMEltZgBuZxU=)
2: qUkyzsESbsS2zlpHenJHCZVcW9w.roa (hash: c8dRUptusWX4N4YghoTv+p9PDy6rP3WCRhu7DIFBHMM=)
3: yB7LzogMvuZgV-kSV9Bk7IJ_z_U.roa (hash: DJXVu9TX9c1g1XkC2WWXZifFU9SFE1sev4C5DeMfFM8=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/82/0ccab6-d837-4c18-82f9-940ae454cb85/1/kIFN053Tklz_iL801DB_1sYhZes.crl
rsync://rpki.ripe.net/repository/DEFAULT/82/0ccab6-d837-4c18-82f9-940ae454cb85/1/kIFN053Tklz_iL801DB_1sYhZes.mft
rsync://rpki.ripe.net/repository/DEFAULT/kIFN053Tklz_iL801DB_1sYhZes.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 27 Mar 2026 21:00:52 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:2b:f3:37:8f:a9:40:80:59:c1:81:62:59:44:a4:35:f5
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=90814dd39dd3925cff88bf34d4307fd6c62165eb
Validity
Not Before: Mar 26 21:00:52 2026 GMT
Not After : Mar 27 21:00:52 2026 GMT
Subject: CN=6460a0473865130bd5a0fc427a629857cae74abe
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d5:38:5f:ed:26:fa:28:05:99:ec:73:63:ff:32:
b7:84:13:75:2a:f8:6d:81:9e:f3:8e:7a:71:a7:e1:
ba:85:ab:17:e5:94:e0:9a:e8:05:62:fa:49:fb:65:
55:75:bc:a2:ad:05:1e:0f:00:cf:8c:20:be:5c:0a:
b6:5d:37:14:0a:15:06:95:28:49:04:e9:b3:33:ef:
fd:15:74:7a:47:ff:85:21:6a:ce:00:08:e0:e9:5f:
ba:6b:ac:28:3d:b4:e6:b0:50:b0:37:4d:1b:03:97:
a5:7e:99:e8:70:34:c8:12:dd:be:06:a6:92:51:49:
89:16:d0:ce:50:5d:02:87:07:bf:79:c9:20:21:15:
97:bb:bb:6a:65:02:01:76:ef:5a:fa:f6:bc:75:77:
18:ce:b2:01:c4:51:49:78:58:55:ae:be:67:f5:e3:
86:90:cc:d3:f1:ad:cc:0e:9c:f1:fd:06:72:4e:1e:
3f:10:11:c7:4c:03:a7:7a:4e:7c:f4:be:5f:6c:b6:
d3:77:9a:ce:23:39:79:e3:fe:49:3c:6a:cc:9c:c9:
b3:38:3b:26:93:d4:58:88:6c:f4:e2:60:32:28:ac:
09:bd:7f:ad:f7:39:45:6f:8e:4d:31:22:72:7f:f1:
cc:d3:c4:65:97:00:3f:12:c8:c0:f0:fa:bf:9a:0c:
02:27
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
64:60:A0:47:38:65:13:0B:D5:A0:FC:42:7A:62:98:57:CA:E7:4A:BE
X509v3 Authority Key Identifier:
keyid:90:81:4D:D3:9D:D3:92:5C:FF:88:BF:34:D4:30:7F:D6:C6:21:65:EB
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/kIFN053Tklz_iL801DB_1sYhZes.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/82/0ccab6-d837-4c18-82f9-940ae454cb85/1/kIFN053Tklz_iL801DB_1sYhZes.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/82/0ccab6-d837-4c18-82f9-940ae454cb85/1/kIFN053Tklz_iL801DB_1sYhZes.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
7b:7d:4e:b7:ba:f9:ef:4c:7e:1d:68:be:7d:75:77:a3:b9:c8:
6a:f8:d4:c5:1e:b0:56:15:e2:9f:44:36:e0:bd:00:d3:81:c8:
9b:82:ae:40:e5:72:d3:84:5d:85:d2:7c:97:6b:40:e0:40:26:
db:ec:0d:3f:ae:34:e4:50:b4:45:fb:2c:ba:51:92:6f:13:f0:
48:c6:06:ba:16:5e:c0:e6:8e:f4:88:33:6b:2d:51:d4:f0:db:
da:81:d5:01:f2:88:a9:f3:b7:b1:41:91:bb:eb:c8:01:e8:32:
66:86:cf:c6:0f:67:e4:90:22:f5:01:08:8b:31:75:c2:b0:95:
56:40:ec:e0:70:c1:5b:b5:da:b0:e8:47:4a:8e:ad:cd:f9:8e:
df:db:af:c4:8b:a7:23:6b:3a:2d:5e:be:f0:2d:1e:7e:ab:c1:
3e:e6:eb:25:46:f6:51:2c:e3:8a:35:16:12:07:de:18:39:7c:
8b:d7:56:da:a7:0f:bb:d2:b0:12:4e:03:56:1a:eb:6c:15:1f:
91:b9:84:1a:93:85:06:e0:bf:a7:73:56:8d:22:32:09:fe:8b:
48:50:64:6e:24:f1:83:79:f0:ec:fd:c3:0b:c5:c1:6e:71:0f:
3e:b6:a7:bc:06:6f:c3:de:f8:3f:da:2c:81:5b:51:e4:a3:57:
ea:fe:a5:f9
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Mar 27 06:21:26 2026 by rpki-client